CVE-2025-27203

Published: Jul 8, 2025Modified: Jun 17, 2026

9.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 6.0

Source: psirt@adobe.com (Secondary)

Description

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed.

Affected (1)

Products: Adobe: Connect Desktop Application

Adobe

1 product

Connect Desktop Application

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Adobe Connect Desktop Application	Before 2025.5.5

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (1)

https://helpx.adobe.com/security/products/connect/apsb25-61.html

Source: psirt@adobe.com

Vendor Advisory

Timeline

No history available yet.